True, but the encryption does mitigate some of the problem of the email being stored on and indexed by google servers. I have personal conversations with a number of people who use gmail, and it bothers me that those conversations are indexed for marketing purposes. It's a bit of a sledgehammer for that purpose, but it looks like it might get the job done.
GnuPG is pretty good. I've just recently started using the EasyPG package in Emacs to interface with GnuPG. Encrypting files couldn't be easier. Files are encrypted at saving and decrypted at loading automatically. Make backing up sensitive files to Dropbox much easier.
This is pretty awesome - I only now wish Gmail would have native support for GPG signatures (I know they will never support GPG encryption). As it is, when people read emails I send in Gmail, the signature appears as a 'noname' 0B attachment, which is irritating.
You guys should checkout: http://thinkst.com/tools/cr-gpg/
We do the some thing, but hook into the DOM to blend it into the interface.
(we have users across win/linux/osx so its been doing pretty well considering its hacky birth)
I'd love to see a mashup of the two. I trialed cr-gpg, works fine, if a bit clunky at the moment. I suspect this is a much better way to interact with gpg though (+ --use-agent, etc.).
Ever since I stopped using Thunderbird and Enigmail, I felt like I was missing something. So today, I finally started to develop my own solution - can't have them read our mails, now can we?
Using multiple devices (laptop with several OS, iPad, eeePC, ..), I really needed IMAP to keep them in sync, so I switched to gmail. Then, I started to use the web interface more and more, until I never really used Thunderbird anymore - I guess I like gmail's interface better.
Oh nice, but then I do not understand how it works. In a mail it could check the mail addresses to see which keys to use. How does it work for any text?